HIPAA Compliance Insights

HIPAA Security Rule

What Safeguards Does the HIPAA Security Rule Require?

In 2023, OCR settled with a healthcare system for $1.3 million after investigators found the organization had failed to implement even basic safeguards for

Carl B. Johnson · Jan 27, 2023

HITECH Act

What Was the Primary Goal of the HITECH Act?

In 2009, the Department of Health and Human Services reported that fewer than 10% of U.S. hospitals had adopted even a basic electronic health

Carl B. Johnson · Jan 27, 2023

PHI

What's Considered PHI Under HIPAA: A Practical Guide

In 2023, OCR settled with a dental practice for $350,000 after an impermissible disclosure involving patient appointment data — information the practice didn't

Carl B. Johnson · Jan 27, 2023

HIPAA Violation

What's a HIPAA Violation? Real Examples and Penalties

In February 2023, OCR settled with Banner Health for $1.25 million after a phishing attack exposed the protected health information of nearly 3 million

Carl B. Johnson · Jan 27, 2023

HIPAA Privacy Rule

When Can a Covered Entity Disclose PHI Legally?

In 2023, OCR settled with a dental practice for $350,000 after the organization disclosed a patient's protected health information to a third-party

Carl B. Johnson · Jan 27, 2023

HIPAA Privacy Rule

When Can You Use or Disclose PHI: A Compliance Guide

In 2023, OCR settled with a dental practice for $350,000 after the organization disclosed a patient's protected health information to a third-party

Carl B. Johnson · Jan 27, 2023

Breach Notification Rule

When Is a Breach Notification Not Required Under HIPAA

In 2023, OCR received over 700 large breach reports from covered entities and business associates — each one triggering federal and state notification obligations, media attention,

Carl B. Johnson · Jan 21, 2023

HIPAA Breach Notification

When Must PHI-Related Breaches Be Reported?

In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million individuals — partly because the organization'

Carl B. Johnson · Jan 9, 2023

HIPAA Implementation

When Was HIPAA Implemented? Key Dates That Shape Compliance

In 2023, OCR settled with a dental practice for $350,000 over Security Rule violations that had persisted since 2016 — failures the practice might have

Carl B. Johnson · Jan 9, 2023

HIPAA History

When Was HIPAA Started? Key Dates Every CE Must Know

In 2023, OCR settled with Banner Health for $1.25 million after a breach affecting over 2.81 million individuals — a case that hinged on

Carl B. Johnson · Jan 9, 2023

HIPAA Certification

Where Can I Get HIPAA Certification? A Compliance Expert's Guide

Every week, at least one compliance officer or new hire sends me some version of the same question: where can I get HIPAA certification? The

Carl B. Johnson · Jan 9, 2023

Technical Safeguards

Which Action Would Be Considered a Technical Safeguard

In 2023, OCR settled with a health system for $1.3 million after investigators found the organization had failed to implement basic access controls on

Carl B. Johnson · Jan 9, 2023